turbinia
turbinia copied to clipboard
Document "targeted" processing
Now that we have recipes, can extract arbitrary artifacts with the 'binary_extraction_path' parameter for the binary extraction Task as well as Yara rules processing, we should document the ways that we have to do targeted processing, ie., extract and process very specific artifacts or hunt for specific IOCs. It would be nice to have a page in the documentation dedicated to this and maybe an example recipe in the recipe's folder for how to do this.