Mass Digital Forensics & Incident Response with Velociraptor

This course teaches learners how to conduct mass digital forensics and incident response using Velociraptor. The learning outcomes include understanding Velociraptor VFS, utilizing artifacts and automation with VQL, matching Sigma Rules with Hayabusa, and parsing findings for various artifacts. The course covers skills such as analyzing processes, tracking process changes, identifying PowerShell artifacts, and hunting for compromised machines. The teaching method involves a demonstration-based approach. This course is intended for individuals interested in digital forensics, incident response, and malware analysis.