Guides tagged: #incident-response

07 · Live Response

Linux Live Response: Triage Through /proc and Volatile Data

A practical Linux live response workflow: trusted binaries, logging your actions, and triaging processes, sockets and modules through /proc before shutdown.

live-responseproctriage

Sep 28, 2026

01 · Acquisition & Triage

Linux Triage Collection with UAC and Velociraptor

Run fast, repeatable Linux triage with UAC profiles and Velociraptor Linux artifacts: what each collects, offline collectors, hunts and what to grab first.

triageuacvelociraptor

Sep 28, 2026