• Threat hunting and information gathering with - Velociraptor DFIR tool.

  • Process analysis

• Threat hunting C2 servers and malware with Zeek and Real Intelligence Threat Analytics (RITA).

  • Zeus
  • Octopus C2 Framework