Please enable JavaScript.

Coggle requires JavaScript to display documents.

Nextron R&D (ASGARD (Playbooks (Endpoint Isolation Script, Collect…

- - - - File System
      - Registry
      - SHIM Cache
      - Mutex
      - Named Pipes
      - DNS Cache
      - Hosts
      - Hotfixes
      - Firewall Config
      - Network Connections
      - Network Share
      - User Sessions
      - Processes
      - Services
      - Rootkits (specific checks)
      - LSA Sessions
      - User Accounts
      - User Profiles
      - Network Open Files
      - Scheduled Tasks
      - WMI
      - At Jobs
      - MFT
      - Eventlog
      - Modules
    - - Textlog
      - Syslog
        
        CEF
      - HTML
      - Public Key Encryption
      - TCP/UDP
      - JSON
  - - - THOR Seed (PowerShell)
- - - - Hacktools
      - Web Shells
      - Malware
      - Registry
      - Log Entries
      - Exploits
      - Scripts
      - Vulnerabilities
      - Hack Tools
      - APT
      - Anonymized Customer Cases
      - False Positives
      - Negative Matches
      - Meta Rules
      - Feature Selector Rules
      - DeepScan Selectors
    - - Hashes
      - Filenames
      - Domains / IPs
      - Named Pipes
      - Mutexes
      - Keywords
      - Registry Keys
      - Startup Keywords
- - - - Hash Calculator
      - Manual Extractor