reverse-skills-max: initial public release (restored, redacted, hardened)
This commit is contained in:
@@ -0,0 +1,10 @@
|
||||
# 取证分诊顺序
|
||||
|
||||
1. 保全与哈希
|
||||
2. 内存急症(进程、网络、注入)
|
||||
3. 持久化与执行痕迹
|
||||
4. 横向与账号异常
|
||||
5. 外联 IOC
|
||||
6. 报告与修复建议
|
||||
|
||||
输出模板字段:Time | Host | Artifact | Finding | Confidence | Evidence path
|
||||
Reference in New Issue
Block a user