tsale/awesome-dfir-skills
A curated collection of DFIR skills and workflows for InfoSec practitioners.
Suspicious PowerShell hunt (cross-platform ideas)
@tsale/awesome-dfir-skills
202
Hypothesis-driven hunt plan for suspicious PowerShell, plus query snippets for common telemetry.
DevOps & Infrastructure
Windows intrusion timeline (targeted)
@tsale/awesome-dfir-skills
202
Create a targeted intrusion timeline for a Windows incident using whatever artifacts are available (event logs, EDR, SIEM exports, triage notes).
Data & AI