Posts tagged "velociraptor"
- Acquiring Amcache.hve from live and dead systems
How to collect Amcache.hve and its transaction logs correctly on live and dead hosts, the file-lock pitfalls, and what good IR collection scripts actually do.
2026-05-27
How to collect Amcache.hve and its transaction logs correctly on live and dead hosts, the file-lock pitfalls, and what good IR collection scripts actually do.
2026-05-27