This job template is designed to collect targeted process-specific volatile information as part of an incident investigation.
| Job Metadata |
| Name | PROCESS_####-TEMPLATE |
| Plugin Selection |
| 📷 Collectors | Custom Plugins:- 262 - [🔥Volatile Info] Handles (Win/Linux)
- 262 - [🔥Volatile Info] Loaded Modules (Win/Linux)
|
Built-in Plugins:- Process Memory Dump Collector
- Thread Collector
|
| ⛙ Transports | WMI Transport (if Windows targets + credentials available)SMB Transport (if Windows targets + credentials available)SSH Transport (if *Nix targets + credentials available)
|
| 🔍 Analyzers | |