https://dfir.au/tags/ai/2026-09-28T00:00:00Zhttps://dfir.au/tags/detection/2026-09-28T00:00:00Zhttps://dfir.au/tags/dfir/2026-09-28T00:00:00Zhttps://dfir.au/2026-09-28T00:00:00Zhttps://dfir.au/posts/2026-09-28T00:00:00Zhttps://dfir.au/projects/2026-09-28T00:00:00Zhttps://dfir.au/tags/2026-09-28T00:00:00Zhttps://dfir.au/tags/velociraptor/2026-09-28T00:00:00Zhttps://dfir.au/projects/velociraptor-skills/2026-09-28T00:00:00Zhttps://dfir.au/tags/threat-hunting/2025-12-01T00:00:00Zhttps://dfir.au/projects/mcp-velociraptor/2025-04-15T00:00:00Zhttps://dfir.au/tags/vql/2025-04-15T00:00:00Zhttps://dfir.au/tags/cti/2024-11-01T00:00:00Zhttps://dfir.au/projects/deathcon2023-practical-death-by-velociraptor/2023-11-20T00:00:00Zhttps://dfir.au/projects/content-management-like-a-boss/2023-09-13T00:00:00Zhttps://dfir.au/posts/2023/qakbot/2023-04-05T00:00:00Zhttps://dfir.au/tags/malware/2023-04-05T00:00:00Zhttps://dfir.au/projects/detectraptor/2022-11-17T00:00:00Zhttps://dfir.au/projects/deathcon-2022-velociraptor-workshop/2022-11-05T00:00:00Zhttps://dfir.au/projects/notebook-and-vql-data-munging-your-way-to-victory/2022-09-17T00:00:00Zhttps://dfir.au/tags/wmi/2022-01-12T00:00:00Zhttps://dfir.au/posts/2022/wmi-eventing/2022-01-12T00:00:00Zhttps://dfir.au/posts/2021/cobaltstrike_vql/2021-11-09T00:00:00Zhttps://dfir.au/posts/2020/ipsec/2020-07-23T00:00:00Zhttps://dfir.au/posts/2019/local_liveresponse_with_vr/2019-12-08T00:00:00Zhttps://dfir.au/posts/2019/liveresponse_with_vr/2019-11-10T00:00:00Zhttps://dfir.au/tags/edr/2019-06-26T00:00:00Zhttps://dfir.au/projects/endpoint-hunting-in-an-antiedr-world/2019-06-26T00:00:00Zhttps://dfir.au/tags/o365/2019-06-09T00:00:00Zhttps://dfir.au/posts/2019/o365_hiddenrules/2019-06-09T00:00:00Zhttps://dfir.au/tags/powershell/2019-06-09T00:00:00Zhttps://dfir.au/posts/2019/binaryrename2/2019-05-29T00:00:00Zhttps://dfir.au/tags/yara/2019-05-29T00:00:00Zhttps://dfir.au/posts/2019/binaryrename/2019-05-12T00:00:00Zhttps://dfir.au/posts/2019/invoke-liveresponse_builder/2019-04-07T00:00:00Zhttps://dfir.au/posts/2018/downloadcradle/2018-04-02T00:00:00Zhttps://dfir.au/posts/2018/sharing_my_bits/2018-02-18T00:00:00Zhttps://dfir.au/posts/2018/invoke-liveresponse/2018-01-14T00:00:00Zhttps://dfir.au/projects/invoke-liveresponse/2018-01-14T00:00:00Zhttps://dfir.au/posts/2017/wmi_eventing/2017-04-03T00:00:00Zhttps://dfir.au/posts/2017/powershell_remoting_ir/2017-01-12T12:00:00+10:00https://dfir.au/about/