Outsourcing the IR playbook to a Tracecat Agent that runs macOS shell-history forensics via CrowdStrike RTR

A design idea for encoding an IR collection playbook as reusable skills behind a single agent preset. A Tracecat workflow empowers a CrowdStrike RTR agent that validates the host, opens a session, discovers and collects …