Velociraptor

Plaso

Velociraptor to BigQuery

YARA

Hayabusa

Reference: Endpoint Agent Commands

Incident Response

YARA Manager

Response Actions

Sleeper Deployment

Dumper

Hayabusa to BigQuery