CHIRP Overview

CISA developed the CHIRP (CISA Hunt and Incident Response Program) - a Windows forensics collection tool - to help network defenders find indicators of compromise associated with the SolarWinds and Active Directory/M365 compromise.
Information 1-888-282-0870 CISA Service Desk (UNCLASS) CISA SIPR (SIPRNET) CISA IC (JWICS) CISA continuously strives to improve its products and services. You can help by answering a very short series of questions about this product at the following URL: us-cert.cisa.g...