Live Response on Blade Scotthttps://bladescott.com/tags/live-response/Recent content in Live Response on Blade ScottHugo -- gohugo.ioen-AU© Blade ScottThu, 05 Nov 2026 00:00:00 +0000DFIR Agent Part 4: A Case It Hadn't Seenhttps://bladescott.com/posts/dfir-agent-part-4/Thu, 05 Nov 2026 00:00:00 +0000https://bladescott.com/posts/dfir-agent-part-4/Velociraptor collections, then a live Windows VM with hidden attack steps: 94 blind, and why the later 100 matters less.