Hunt for Hackers with Velociraptor

j-h.io/pwyc || Jump into Pay What You Can training -- at whatever cost makes sense for you! j-h.io/pwyc
Download the PWYC VM: www.antisyphon...
Reddit Instructions for nested virtualization: / virtualized_amdvrvi_is...
John Strand's Intro Labs Github: github.com/str...
🔥 KZbin ALGORITHM ➡ Like, Comment, & Subscribe!
🙏 SUPPORT THE CHANNEL ➡ jh.live/patreon
🤝 SPONSOR THE CHANNEL ➡ jh.live/sponsor
🌎 FOLLOW ME EVERYWHERE ➡ jh.live/discord ↔ jh.live/twitter ↔ jh.live/linkedin ↔ jh.live/instagram ↔ jh.live/tiktok
💥 SEND ME MALWARE ➡ jh.live/malware

[@Sinned1208]

I didn't know you could Ctrl+Shift+Enter to directly jump to an admin shell :D I always manually selected "open as administrator". Man this saves so much time!

[@MrSCAAT]

Thanks for all your work in educating the next generation. Bravo 🎉

[@Joshua1_7sc]

So, becoming more and more like the Jurassic Park John Hammond.

[@warlordkeys]

Learned a lot from watching John. The only person I've actually sat and browsed through all the content and videos on YT... I would highly.. HIGHLY.. HIGHLY.. recommend this channel for anyone wanting to learn computer science and or cybersecurity engineering... along with a few OTHERS... Thanks Mr. Hammond.. you'll be a legend one day. Keep on keeping on.

[@Limelick]

You Are One Of The Good Channel, I Have Ever Seen. No cap😇

[@h8handles]

Lol John Hammond talking about Velociraptors....this makes sense

[@pcsecuritychannel]

So…you bred raptors… (Serious Dr Grant look)

[@thewilsupremacy]

Damn Another Quality video like always

[@jcpatrick4824]

EXCEPTIONAL THANK YOU! 👍🎯🙏

[@moonshadowrev]

i think for testing enviroments in companies for security its a great tool , thanks john , its great

[@xr6turbo511]

Great video. Love to see more on the app.

[@compilererror]

I love John ❤I love this community

[@FuzzerHash]

John ever with nice content.

[@gaoquake]

Ur awesome bro! keep it up!

[@Hoaa89]

Thank you John !

[@djsvrlaivwfofj]

What do you suggest to pair with velociraptor for detections/alerting?

[@funnyboy5437]

Man you make the day

[@kennethrutt7986]

You are already in Windows Terminal Emulator, just import the CSV with PowerShell, and then show it in PowerShell as a table....it will show you better than opening notepad/word pad

[@homegeographic5351]

got a question the win10 is a container in docker? or is just a hostname

[@joepjoep9531]

Nice, but are you on fast forward? lol

[@pepemunic3661]

free free free and free content that's why I follow you my brother

[@HarvestHaven09]

Welcome back 🔙

[@valk9789]

Congrats 👏 on your name~ John HAMMOND in there!😅

[@NilsRimestad]

This tool had bit of a leaning curve when I first found it, but wow a great help it was when log4j hit ❤

[@tyrojames9937]

NICE❗

[@techwithanirudh]

Nice!

[@fwenny]

what are you using for your powershell / cmd? I like the different tabs, more organized than having a separate window for each one

[@fwenny]

thank you both!

[@_JohnHammond]

This is Windows Terminal :)

[@Random_PersonOfficial]

@@fwenny what a complete idiot

[@MoppelMat]

If you configure a hunt, does it collect past data, or just more recent ones that come in?

[@anthropicPanda]

Spare no expense..

[@lmaoo254]

W

[@DankUser]

Something something clever girl

[@andersodgaard6699]

A small heads up..Remember to breathe :) I love the content but I could use some small "art breaks"

[@davidkamaunu7887]

thats what the commercials are for

[@stefanmihaylov6028]

What about SNORT

[@synack_DCCBUS]

Thanks John really cool

[@dutchslav5534]

here at minute 3

[@exploitworld8954]

frist comment dadddy chill

[@calwoods3762]

Clickbait title... it doesn't hunt hackers, it searches for abnormalities and runs commands on systems.

[@kevincalebout3244]

Your a hacker

[@ヽノ-u4t]

first

[@davidkamaunu7887]

lame

[@davidkamaunu7887]

I've used this for DFIR investigations, digging for various artifacts. There was presentation at DFRWS a few years ago. its a great tool and you did an excellent presentation John. 👏🦾