GRR in action
See below how to get Google Rapid Response into real action.
Connect to port 8000 of your server installation and login using the credentials created during the GRR server install or use the command grr_console from the CLI.
Fight against Phase 1 Fight against Phase 2 Fight against Phase 3 Fight against Phase 4 IOC sharing Find random generatet URL's APT Simulator to test your capabilities CyCON 2019 Secure your Microsoft software Password's Cyber Threat Intelligence OSINT Information gathering Malware analysis Equation MISP Forensic
Attack Mobile phones Windows machine
Splunk Incident response Motivation 1st responder actions Tools $MFT related Memory Harddisks SIFT - Memory Analysis Xplico action Windows artefacts
Linux machine PDF Tools'n links MS Word docx using Autopsy Bitscout - The Free Remote Digital Forensics Tool Builder