threat_hunting

Comments
Is someone clearing your Windows event logs? 0
Monitor for named pipe execution (osquery) 0
Check if meterpreter (Metasploit) is running on your system checking the default remote port (osquery) 0
Check if a Metasplot service has been installed on your Windows computer (osquery) 0