- Building DFIR Playbooks with Huddle
- ADFIRWMC - 5.1 Did It Run? Evidence of Execution
- Reverse-Engineering a FitRx EMS App into a Python Controller
- Spoke: Seeing the Relationships in Your CSVs
- What ChatGPT Wrote When I Asked It to Blog
- Kernel-Level Access with Live Response
- Running Arbitrary Commands with Live Response
- Using the API for Live Response
- Building a Quick Defender for Endpoint API Wrapper
- Multifactor Access to the Defender for Endpoint API
