Trawler is a script to aid DFIR teams in the rapid discovery of potential Windows persistence mechanisms - I've tested this artifact locally and it appears to function as expected with no known issues. I am by no means an expert in VQL so please let me know if there are any obvious issues.
Trawler is a script to aid DFIR teams in the rapid discovery of potential Windows persistence mechanisms - I've tested this artifact locally and it appears to function as expected with no known issues. I am by no means an expert in VQL so please let me know if there are any obvious issues.
I have also signed the CLA already.