Tag: Incident Response
All posts tagged with "Incident Response"
Playbooks
QueryCast is meant to be a SIEM conversion web application that allows you to convert SIGMA or other SIEM rules into other formats using the SIGMA …
4N6Post Artifacts
Registry - SAM
SAM Database - Windows Security Account Manager Security Account Manager (SAM) database in short, is the critical components of Windows security …
Backdoors & Breaches
Portainer Stack Ref: https://github.com/p3hndrx/B-B-Shuffle yaml 9 lines # Backdoors and Breaches # https://github.com/p3hndrx/B-B-Shuffle services: …
Velociraptor - Endpoint Visibility & Digital Forensics
Velociraptor is a web-based tool designed for endpoint visibility and management. It provides a user-friendly interface for monitoring and managing …
KAPE to SOF-ELK
Resources and Help SOF-ELK from GitHub or VM from FOR572 Kroll - KAPE Direct Download SOF-ELK KAPE Support YouTube Video Guide by SystemForensics …
Prefetch
Windows Prefetch Analysis - Digital Forensics Execution Tracking Windows Prefetch is a feature in the Windows operating system that was first …
SysInternals Tools Registry Forensics
SysInternals Tools - Registry Forensics and Analysis What is SysInternals? SysInternals is a suite of advanced system utilities for Microsoft Windows …