#Velocidex - Twitter Hashtag

about 3 years ago

I just finished a blog that provides two new practical examples on how responders can detect adversary behaviour with the incident response and digital forensics tool Velociraptor. #Velocidex #DFIR #IncidentResponse #Velociraptor https://t.co/C2bMGkiQ7N

DfirJos's tweet photo. I just finished a blog that provides two new practical examples on how responders can detect adversary behaviour with the incident response and digital forensics tool Velociraptor. #Velocidex #DFIR #IncidentResponse #Velociraptor

https://t.co/C2bMGkiQ7N https://t.co/gaImNh4XQg

0

99

33

26

8K

Matthew Green 🌻

@mgreen27

over 3 years ago

@fancy_4n6 We also have a cool artifact to do this in Velociraptor from @yampelo https://t.co/vyybd04GuL Its been a while since I used it but it deploys a etl2pcapng to do the conversion too! #velocidex

2

7

0

314

Jos @DfirJos

almost 4 years ago

Just finished this @Velociraptor artifact to parse AnyDesk logs. Use it to discover data exfiltration, remote logons, source IP addresses, and AnyDesk ID’s. Check: https://t.co/Uzzpgf33iN #DFIR #Velocidex #Velociraptor #IncidentResponse

1

89

25

16

0

Matthew Green 🌻

@mgreen27

over 4 years ago

A short blog today on WMI Event Consumers and Velociraptor - https://t.co/MxsJew4bCk #velocidex #DFIR

0

17

5

2

0

Matthew Green 🌻

@mgreen27

almost 5 years ago

An awesome cross platform Velociraptor capability to deploy LunaSec Log4j scanner from Marinus Boekelo & Noël Keijzer @ Northwave CERT. https://t.co/SN4fw4T68e #dfir #velocidex

0

17

6

0

Brent Muir @bsmuir

over 5 years ago

I missed this one. Great post by Mike Cohen on moving from #OSquery language to @Velocidex VQL. #Velocidex #infosec #Cybersecurity #DFIR #forensics #EDR https://t.co/Q5jkYNdwYV

0

1

3

1

0

Mike Pilkington @mikepilkington

over 6 years ago

Great article here that describes potential problems of offline Windows Event Log parsing due to event messages being stored in provider DLLs, rather than the events themselves. A free tool from #Velocidex called "dumpevtx" is introduced to address this. https://t.co/twhycHJFww

0

13

4

3

0