Completed
Introduction
Class Central Classrooms beta
YouTube playlists curated by Class Central.
Classroom Contents
Mass Digital Forensics & Incident Response with Velociraptor
Automatically move to the next video in the Classroom when playback concludes
- 1 Introduction
- 2 Velociraptor VFS
- 3 Artifacts & Automation w/ VQL
- 4 Sigma Rule matching w/ Hayabusa
- 5 Waiting on Hayabusa to finish scan.
- 6 How does Hayabusa compare to Chainsaw?
- 7 Parsing Hayabusa Findings
- 8 PsTree Attempt 1 w/PsList
- 9 PsTree Attempt 2 w/Velociraptor Process Tracker
- 10 Velociraptor Process Tracker
- 11 PSExec Change in v2.30 & How to look for the usage of PSExec
- 12 Why this is useful and example use case'
- 13 PowerShell Artifacts
- 14 Bits Transfer Artifact
- 15 How to hunt for multiple compromised machines.
- 16 Parsing the Results using VQL
- 17 Demo Conclusion
