Velociraptor Misuse, Pt. II: The Eye of the Storm

Huntress reports an uptick in threat actors abusing the Velociraptor open-source DFIR tool, linked to incidents involving WSUS exploitation, VS Code tunnels, and more.

devsecurity

Sources