Skip to content

Forensic triage

Named by 4 kept items in this workspace.

Search every workspace for Forensic triage. It matches the name as written, so it can find other things that share it.

The items that name it 4

  • repo2026-10-20
  • advisory2026-10-14It is written here as Forensic triage: investigate abnormal Chrome/Crashpad crashes, unexpected child processes and suspicious execution following webpage visits.
  • advisory2026-10-13It is written here as Forensic triage: investigate non-admin POST requests to /config/update, unauthorized environment-variable changes, unexpected pass-through endpoints and suspicious S3/GCS module loading.
  • advisory2026-10-11It is written here as Forensic triage: audit unexpected administrator accounts, unauthorized role changes, suspicious OTP-related requests, and unusual account activity.

All techniques in this workspace.