Velociraptor Challenge Walkthrough - TryHackMe - Digital Forensic and Incident Response Tool DFIR

[@shilajacm582]

Wonderful keep doing like that

[@Raj-Bhat-RB]

thanks a lot for the walkthrough!..

[@mochagawd]

Thank you I was so stuck on task 8 SELECT clause and after!

[@killerbees1199]

thank you so much!

[@heydreamer1991]

Teşekkürler ancak bazı kısımlarda takıldım özelikle task 6 son soru ve sonrasını yorum olarak bir Türkçe özet geçebilirsen sevinirim. İyi çalışmalar

[@Philippon1]

Task 3 Q5 is not working. The Q is: In the Shell, run the following PowerShell command Get-Date. What was the PowerShell command executed with VQL to retrieve the result? The answer I came up with is: "powershell -ExecutionPolicy Unrestricted -encodedCommand RwBIAHQALQBEAGEAdABIAA==". I've tried looking it up and everyone has come up with this answer but it comes up as wrong. Please someone help!

[@eleuteriolima7497]

I am having the same issue!

[@t1moo_670]

a bit late but this worked for me:
powershell -ExecutionPolicy Unrestricted -encodedCommand ZwBlAHQALQBkAGEAdABlAA==

[@Defender_IQ]

Thanks

[@mrorockbluegreen]

merhaba task 3 son soruda powershell command kopyalayip vm den tryhackme cevap kismina yapistiramiyorum.Sol yanda acilan control bar da yok nasil kopyala yapistir yapabilirm

[@tednelson9707]

powershell -ExecutionPolicy Unrestricted -encodedCommand ZwBlAHQALQBkAGEAdABlAA==