2.4 | SOC Tier 2 | Investigating File Telemetry (Elastic Defend EDR)

وصف الدرس

What did Rider.exe do on disk? Reading its file telemetry and the pattern it left behind: a series of C:\Temp\logs-<timestamp> files, and what that pattern tells us about its operation.

التحق بـ Chasing Rider لفتح المحتوى كاملًا.