tag :: Detection

• Cobalt Strike payload discovery and data manipulation in VQL
• Velociraptor vs Printnightmare
• Detection Engineering
• The Registry Hunter
• Developing Sigma Rules in Velociraptor
• Sigma In Velociraptor
• Automating Qakbot decode at scale
• WMI Event Consumers: what are you missing?
• EQL to VQL - Leverage EQL based detection rules in Velociraptor
• ETW Part 2: Process Parent Spoofing
• Event Tracing for Windows Part 1
• HashRunKeys