2022
- WMI Event Consumers: what are you missing? » 12 Jan 2022
2021
2020
- Windows IPSEC for endpoint quarantine » 23 Jul 2020
2019
- Local Live Response with Velociraptor ++ » 08 Dec 2019
- Live response automation with Velociraptor » 10 Nov 2019
- O365: Hidden InboxRules » 09 Jun 2019
- Binary Rename 2 » 29 May 2019
- Blue Team Hacks - Binary Rename » 12 May 2019
- Live Response Script Builder » 07 Apr 2019
2018
- Powershell Download Cradles » 02 Apr 2018
- Sharing my BITS » 18 Feb 2018
- Invoke-LiveResponse » 14 Jan 2018
2017
- Blue Team Hacks - WMI Eventing » 03 Apr 2017
- PowerShell Remoting and Incident Response » 12 Jan 2017