Ever had an employee lose a laptop (or have stolen) and wished you could remotely wipe it? Of course, MDM and similar solutions often have this capability, but assuming you don't -- I wrote a @velocidex artifact that will get the job done. It's been tested multiple times to great success. 💥

💣WARNING - THIS WILL DESTROY THE SYSTEM, but sometimes (lost or stolen laptop) that's exactly what you want to do.💣

I am not submitting this to the artifact exchange because it's too risky to just have folks unknowingly import this into their VR deployments, so if you want it, get it here: https://gist.github.com/ecapuano/679791ffe049a0b2e81a645df3084944 #velociraptor

Quarterly maintenance. Upgrading my Velociraptor server and testing rapid response readiness. Use for ad hoc DFIR investigations and emergency management of live collections. @velocidex #velociraptor

Very practical tool for #DFIR

If you couldn't catch Marcus Guevara's talk during @cactuscon, here's the recording - https://www.youtube.com/live/OIfOhFOmX-8?feature=share&t=1h40m59s

"Is Dead Memory Analysis Dead?" is a 🔥 talk, complete with donkeys and DFIR

Featuring some of our favorites, @velocidex and EchoTrail 💙🤓

#cc11

Here are the slides from the talk @shortstack and I gave at @cactuscon on "Security Operations with Velociraptor": https://reconis.co/secops_with_vr

You can watch the recorded stream here: https://reconis.co/secops_with_vr_stream

#CC11 #CactusCon #DFIR #infosec #secops #velociraptor