J Schell

@Alex-null is that the same as https://github.com/chaitin/collie ? Do you have an example/ hash of the endpoint executable?

@mgreen27 , I like the idea of searching against disk/ file/ registry indicators, this would need a new template for both file and registry artifacts

?no longer found on doradosoftware landing page