turbinia icon indicating copy to clipboard operation
turbinia copied to clipboard

Document "targeted" processing

Open aarontp opened this issue 1 year ago • 0 comments

Now that we have recipes, can extract arbitrary artifacts with the 'binary_extraction_path' parameter for the binary extraction Task as well as Yara rules processing, we should document the ways that we have to do targeted processing, ie., extract and process very specific artifacts or hunt for specific IOCs. It would be nice to have a page in the documentation dedicated to this and maybe an example recipe in the recipe's folder for how to do this.

aarontp avatar Aug 04 '22 00:08 aarontp