meta data for this page
  •  

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
soc:tools:velociraptor [2026/06/12 10:26] – titannetsoc:tools:velociraptor [2026/06/12 10:53] (current) – titannet
Line 35: Line 35:
  
  
 +# sudo chmod -R a+rwX ./splunk/
 +sudo cp props.conf etc/system/local/props.conf
  
 docker image load -i ./splunk.tar docker image load -i ./splunk.tar
 docker compose up docker compose up
 +
 +# settings -> add -> monitor -> plaso.conf -> ...
 +
 +index="pc_plaso"
  
 </code> </code>