Hurukai - Get All Artifacts

Build a global archive with: - MFT (Windows) - Hives (Windows) - USN logs (Windows) - Prefetch files (Windows) - EVT/EVTX files (Windows) - Log files (Linux) - Filesystem content (Linux)

Pack

HarfangLabEDR

Tasks

7

Inputs

• agentid

Commands used

• harfanglab-get-endpoint-info
• harfanglab-job-artifact-all
• harfanglab-result-artifact-all