> For the complete documentation index, see [llms.txt](https://sarpers-organization.gitbook.io/ctftricks/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://sarpers-organization.gitbook.io/ctftricks/_chapter-intro-5/endpoint-analysis.md).

# Endpoint Analysis

- [Osquery](https://sarpers-organization.gitbook.io/ctftricks/_chapter-intro-5/endpoint-analysis/forensics-endpoint-analysis-osquery.md)
- [Redline](https://sarpers-organization.gitbook.io/ctftricks/_chapter-intro-5/endpoint-analysis/forensics-endpoint-analysis-redline.md)