A place to share projects and presentations I have worked on.

All AntiEDR DFIR Hunting Powershell VQL Velociraptor WinRM

Invoke-LiveResponse
Powershell DFIR WinRM
Jan 2018

Endpoint Hunting in an AntiEDR World
AntiEDR DFIR EDR
June 2019

Notebook and VQL - data munging your way to victory!
DFIR Velociraptor VQL
September 2022

DEATHcon 2022 Velociraptor workshop
DFIR Velociraptor VQL Hunting
November 2022