Linux rapid triage using velociraptor offline collector with catscale Today we will see how we can collect linux artifacts during malware incidents. Catscale will use linux live on the land tools to collect artifacts. Step 1: Download the velociraptor from the below link on your analyst windows system: https://docs.velociraptor.app/downloads/ Step 2: Now we need to launch PowerShell to execute the velociraptor gui by the following command. .\velociraptor-v0.XX.X-windows-amd64.exe gui Step 3: In this step we will import the catscale VR artifacts. Here we have multiple steps. 1. From the VR welcome page, click on " Import Extra Artifacts ". 2. On the next dialogue box, follow below image instruction. Remove all except Artifact Exchange and The Triage Artifacts . Artifact Exchange contains the catscale. 3. Now click Launch to import the artifacts. 4. Once it is done then you will see check mark under state column like the below image. 5. No...