velociraptor-docs icon indicating copy to clipboard operation
velociraptor-docs copied to clipboard
verified publisher icon Velocidex

Create PSList.MalwareBazaarLookup.yaml

Open hasamba opened this issue 2 years ago • 2 comments

hasamba avatar Jul 17 '23 11:07 hasamba

This artifact is set as type client but it can not be run on the client (it should be a server artifact).

This probably is not complex enough to have an artifact for it. Maybe it is just a notebook cell suggestion or a knowledge base article?

scudette avatar Jul 25 '23 13:07 scudette

This artifact is set as type client but it can not be run on the client (it should be a server artifact).

This probably is not complex enough to have an artifact for it. Maybe it is just a notebook cell suggestion or a knowledge base article?

Its just like this one that is also a client artifact just for malwarebazzar instead of VT https://docs.velociraptor.app/exchange/artifacts/pages/pslist.vtlookup/ It checks the client processes and check them against malwarebazzar (as you probably can tell 😉) But whatever you decide is fine with me, you're the master 🙏

hasamba avatar Jul 25 '23 13:07 hasamba