Results for “shadow-copy”

5 skills

hunting-for-shadow-copy-deletion

Hunt for Volume Shadow Copy deletion activity that indicates ransomware preparation or anti-forensics by monitoring vssadmin, wmic, and PowerShell shadow copy commands.

24.6k · bundle

More results

abusing-shadow-credentials-for-privesc

Take over Active Directory user and computer accounts by writing alternate certificate keys to msDS-KeyCredentialLink (Shadow Credentials) with pyWhisker, Whisker, and Certipy, then authenticate via PKINIT.

24.6k · bundle

detecting-shadow-api-endpoints

Discover and inventory undocumented API endpoints by comparing live traffic against OpenAPI specs, scanning code repositories, and analyzing cloud configurations.

24.6k · bundle

scanning-container-images-with-grype

Scan container images for known vulnerabilities using Anchore Grype with SBOM-based matching and configurable severity thresholds.

24.6k · bundle

triaging-windows-with-kape

Collect and parse forensic artifacts from Windows systems using KAPE for rapid DFIR triage.

24.6k · bundle