One of my #SANSParis students shared this triage acquisition tool with me, DFIR ORC (“Outil de Recherche de Compromission”).

It's exciting how many awesome open source options we're seeing in just the small niche of triage acquisition!...

For those that attended my SANS@Night talk, Threat Hunting with Open Source Tools at #SANSParis, here are the slides as requested! cc/@SANSEMEA

http://bit.ly/2K6dfwS