Outsourcing the IR playbook to a Tracecat Agent that runs macOS shell-history forensics via CrowdStrike RTR
A design idea for encoding an IR collection playbook as reusable skills behind a single agent preset. A Tracecat workflow empowers a CrowdStrike RTR agent that validates the host, opens a session, discovers and collects …
Automating Chrome History Collection using CrowdStrike and Tracecat - Part 3: Professional Polish
Complete the automated forensic workflow with proper cleanup, session termination, and final documentation. Part 3 covers removing temporary files without destroying evidence, graceful RTR session closure, and …
Automating Chrome History Collection using CrowdStrike and Tracecat - Part 2: The Collection Engine
Build the core evidence collection engine for automated Chrome history forensics. Part 2 covers integrity hashing, file copying with validation checkpoints, evidence packaging, and upload to RTR cloud storage.
Automating Chrome History Collection using CrowdStrike and Tracecat - Part 1: Foundation & Discovery
Learn how to automate Chrome browser history collection from macOS devices using CrowdStrike RTR and Tracecat SOAR. Part 1 covers workflow foundations, device validation, and user discovery.