Run a Velociraptor artifact collection instance of a device using LimaCharlie and Slack. The results of the artifact collection will be posted as a file to a Slack thread.
Conor Dunne
How it works
Import this story to your tenant, from where you can adapt it to meet your unique needs.
Import